>> the term "tracking" used to describe is something of a misnomer, it's not realtime. it's storing the record of where the cell phone was when the call was made. as you say, this was outside united states. the nsa does this the capability to gather data inside but it has not, chosen not to do it but it does track it outside the u.s. it's part of what is in the database of phone calls. go back and try to reconstruct where someone was or try to develop relationships, see who was in a certain place where maybe something bad happened, who was around a person the time the call was made, that data. they say it's valuable to gather information on suspected terror cells overseas. as you know it has caused concerns here and overseas that it's a violation of privacy. >> we also learned about stolen credentials and how stupid people can be about their passwords. tell us about that. >> well, i frankly thought that was the most interesting part of this story. if you look at the numbers it looks like a lout a million and a half p accounts, hit facebook, twitter, linked in, so forth.